diff --git a/SoObjects/SOGo/LDAPSource.m b/SoObjects/SOGo/LDAPSource.m
index 7902b636d..d150f9a36 100644
--- a/SoObjects/SOGo/LDAPSource.m
+++ b/SoObjects/SOGo/LDAPSource.m
@@ -586,7 +586,7 @@ groupObjectClasses: (NSArray *) newGroupObjectClasses
                                      _IDField, [_login escapedForLDAPDN], _baseDN];
               }
 
-            if (userDN)
+            if (userDN && [[userDN lowercaseString] hasSuffix: [_baseDN lowercaseString]])
               {
                 if (!_passwordPolicy)
                   didBind = [bindConnection bindWithMethod: @"simple"